Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer
File:                     412292C0E24D8885B4760BC708F9E477870D9C70.cer (raw, json)
Hash identifier:          xv8F1W5CAurn0dXUlMTPPuj/b/lPYhjDvGEufWFBNqQ=
Subject key identifier:   41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70
Authority key identifier: 99:D9:22:57:4A:DC:FE:8B:37:41:93:00:44:51:2F:9A:57:EF:91:A4
Certificate issuer:       /CN=99D922574ADCFE8B3741930044512F9A57EF91A4
Certificate serial:       776A1DE2FCE242540591A59BD583B0418B383710
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/412292C0E24D8885B4760BC708F9E477870D9C70.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Sat 29 Jun 2024 14:46:32 +0000
Certificate not after:    Sat 28 Jun 2025 14:51:32 +0000
Subordinate resources:    IP: 2a07:54c0:ffee::/48

Validation:               Failed, certificate revoked on Tue 06 Aug 2024 18:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:6a:1d:e2:fc:e2:42:54:05:91:a5:9b:d5:83:b0:41:8b:38:37:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D922574ADCFE8B3741930044512F9A57EF91A4
        Validity
            Not Before: Jun 29 14:46:32 2024 GMT
            Not After : Jun 28 14:51:32 2025 GMT
        Subject: CN=412292C0E24D8885B4760BC708F9E477870D9C70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c6:e3:73:f7:af:1f:3f:d8:58:90:25:da:f1:
                    a4:29:af:46:5f:f9:1e:6f:bb:18:58:d2:98:73:ca:
                    d6:37:45:b2:7e:d6:f5:5a:84:a5:34:72:50:a8:b5:
                    a7:c7:ce:69:fb:1e:06:b6:71:0c:b6:9a:32:a7:a8:
                    3e:4b:3c:ca:1f:5e:4f:7f:83:0c:d8:52:59:37:b9:
                    f6:5e:dc:c2:c3:94:a6:6e:e9:06:18:24:5c:0c:99:
                    62:8c:5b:af:46:b6:ab:f0:53:ad:54:29:37:37:50:
                    e1:05:2f:05:0b:d8:a0:10:92:7e:25:b3:0d:19:ee:
                    82:7d:5a:e3:64:f8:98:c0:57:18:77:6f:a0:13:df:
                    86:33:05:06:e3:b6:fd:e1:bb:f3:d5:ee:fc:f0:e3:
                    1c:2e:ed:37:0e:dd:65:ec:a8:d2:1d:86:0c:29:cd:
                    fb:5c:b6:f3:90:d7:57:ca:9d:5d:38:06:78:ae:9e:
                    ec:a4:fb:07:cb:0d:fa:87:55:67:f1:21:c1:75:63:
                    58:a0:ae:6d:27:76:2b:ac:83:1c:ee:29:64:f4:e3:
                    c3:e8:fc:54:78:e7:6c:1e:01:e0:f5:25:87:58:b4:
                    09:93:e5:f1:83:5f:d0:48:b6:1b:df:5a:5a:08:26:
                    ea:14:c5:38:ab:f7:be:a7:79:39:ee:69:9a:38:b5:
                    40:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70
            X509v3 Authority Key Identifier:
                keyid:99:D9:22:57:4A:DC:FE:8B:37:41:93:00:44:51:2F:9A:57:EF:91:A4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/412292C0E24D8885B4760BC708F9E477870D9C70.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:2b:89:36:42:71:29:53:c2:59:c1:b1:3a:d9:6a:f5:a5:6b:
         50:98:d9:28:db:06:34:fe:c4:b3:ab:02:33:9c:04:aa:56:90:
         9e:18:c8:2a:ce:52:e9:ce:78:69:1b:bd:34:29:f5:5a:ab:98:
         1f:a1:da:f6:f1:05:75:18:2f:ff:4a:96:b0:05:9a:6f:e0:7f:
         c2:a5:e9:13:9f:b4:34:d6:01:3a:66:6e:3d:b7:ec:99:3f:e7:
         b8:10:0e:e3:70:74:74:86:b2:ad:cd:5d:da:7a:59:6e:52:b5:
         1c:8a:70:b9:3f:de:58:36:e7:07:8d:6f:68:54:7a:cd:8d:03:
         d2:d6:ae:8d:0a:6e:f9:6b:d9:6d:fe:63:d4:af:1c:2f:90:ef:
         7d:e4:c7:4a:51:a0:f7:ec:2e:e5:f0:0f:ed:6d:48:6b:2e:51:
         93:28:07:cb:85:65:f9:8d:55:6a:d7:df:e9:df:f2:42:65:45:
         95:ed:62:32:36:74:fe:4f:18:f1:b8:1b:23:70:bf:ad:08:0b:
         70:70:ca:a9:79:50:80:f0:d2:a9:84:5d:a1:7e:fc:79:24:17:
         f5:da:25:e2:2c:77:b8:62:17:e1:1f:50:2e:8d:b9:17:1c:60:
         5c:79:29:a6:47:cb:6a:fd:cc:11:2f:3d:0f:ce:d0:c2:82:55:
         18:68:b3:93
-----BEGIN CERTIFICATE-----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